removed URL from upload.html temporaily
set input password to type password in login